{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:30.509Z","products":["apple"],"actNowTotal":1,"results":[{"query":"apple","matched":2,"actNow":1,"events":[{"id":"kev-2026-09-29-apple-multiple-products","url":"https://securitythreatpulse.com/events/kev-2026-09-29-apple-multiple-products","title":"Several Apple products: attackers can run their own code","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 43 days old, so many systems are likely still unpatched.","tier":"now","rankScore":4,"rankWhy":["Exploitation is confirmed by an authoritative source.","3 products are affected."],"rulesVersion":"v3","ladder":{"talk":"confirmed","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-86950"],"vendor":"Apple","product":"Multiple Products","affectedProducts":[{"kind":"direct","slug":"apple/multipleproducts","vendor":"Apple","product":"Multiple Products","evidence":["kev"],"vendorKey":"apple","productKey":"multipleproducts"},{"kind":"direct","slug":"apple/iosandipados","vendor":"Apple","product":"IOS And Ipados","evidence":["cpe"],"vendorKey":"apple","productKey":"iosandipados"},{"kind":"direct","slug":"apple/macos","vendor":"Apple","product":"macOS","evidence":["cpe"],"vendorKey":"apple","productKey":"macos"}],"category":{"id":"endpoint","label":"Computers, phones and browsers","why":"It runs on staff computers, phones or browsers.","doThis":"Install the latest updates on every device, and turn on automatic updates."},"summary":"Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.","cvss":8.8,"epss":0.26166,"exploitMaturity":"poc","kevListed":true,"kevDateAdded":"2026-09-29","kevDueDate":"2026-10-13","firstSeenAt":"2026-09-29T00:00:00.000Z","updatedAt":"2026-11-10T19:31:15.956Z","newestEvidenceAt":"2026-10-31T01:49:43.174Z"},{"id":"kev-2026-11-04-apple-multiple-products","url":"https://securitythreatpulse.com/events/kev-2026-11-04-apple-multiple-products","title":"Several Apple products: attackers can get in without a password","verdict":"watch","verdictReason":"Attacks are confirmed, but the vulnerability is more than a year old and we see no ransomware use, public attack tools, internet-facing product, critical severity or high prediction score. Check whether it applies to you.","tier":null,"rankScore":6,"rankWhy":["Exploitation is confirmed by an authoritative source.","The confirmation is 7 days old.","6 products are affected."],"rulesVersion":"v3","ladder":{"talk":"confirmed","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2024-27834"],"vendor":"Apple","product":"Multiple Products","affectedProducts":[{"kind":"direct","slug":"apple/multipleproducts","vendor":"Apple","product":"Multiple Products","evidence":["kev"],"vendorKey":"apple","productKey":"multipleproducts"},{"kind":"direct","slug":"apple/safari","vendor":"Apple","product":"Safari","evidence":["cpe"],"vendorKey":"apple","productKey":"safari"},{"kind":"direct","slug":"apple/iosandipados","vendor":"Apple","product":"IOS And Ipados","evidence":["cpe"],"vendorKey":"apple","productKey":"iosandipados"},{"kind":"direct","slug":"apple/macos","vendor":"Apple","product":"macOS","evidence":["cpe"],"vendorKey":"apple","productKey":"macos"},{"kind":"direct","slug":"apple/tvos","vendor":"Apple","product":"tvOS","evidence":["cpe"],"vendorKey":"apple","productKey":"tvos"},{"kind":"direct","slug":"apple/watchos","vendor":"Apple","product":"watchOS","evidence":["cpe"],"vendorKey":"apple","productKey":"watchos"}],"category":{"id":"endpoint","label":"Computers, phones and browsers","why":"It runs on staff computers, phones or browsers.","doThis":"Install the latest updates on every device, and turn on automatic updates."},"summary":"Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.","cvss":5.5,"epss":0.01502,"exploitMaturity":"none","kevListed":true,"kevDateAdded":"2026-11-04","kevDueDate":"2026-11-18","firstSeenAt":"2026-11-04T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-11-09T08:15:24.195Z"}]}]}